This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft File: qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft (raw, json) Hash identifier: ZQ+n4Lx2vtyCixcSDQIwHaBZowEpfT8BzomD7Lj8B8k= Subject key identifier: C5:32:57:73:04:A0:99:44:F4:5B:F0:0E:CA:98:FF:19:16:E5:09:7A Authority key identifier: A8:03:2F:57:A6:11:9B:69:2A:2B:8F:14:2C:E4:94:EC:08:B1:FC:D8 Certificate issuer: /CN=a8032f57a6119b692a2b8f142ce494ec08b1fcd8 Certificate serial: 019B42EE4A68A6283069235726F5D1D497E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft Manifest number: 0500 Signing time: Sun 21 Dec 2025 22:01:11 +0000 Manifest this update: Sun 21 Dec 2025 22:01:11 +0000 Manifest next update: Mon 22 Dec 2025 22:01:11 +0000 Files and hashes: 1: YnK9gT6S7S0RgJeRsD04H4ISSzM.roa (hash: DtfDFV6FFewqe27Bp/4vezKhP0+2FJRS8CYQqbxzDS4=) 2: qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl (hash: 5rnRYQ5ynFeVA0wldbADpcjGITf26ikMD6rtCiHqrec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:4a:68:a6:28:30:69:23:57:26:f5:d1:d4:97:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8032f57a6119b692a2b8f142ce494ec08b1fcd8 Validity Not Before: Dec 21 22:01:11 2025 GMT Not After : Dec 22 22:01:11 2025 GMT Subject: CN=c532577304a09944f45bf00eca98ff1916e5097a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e5:77:94:b5:2f:52:e7:39:3a:61:57:bc:f3: b7:4d:bb:34:30:f6:3a:92:13:4b:fb:04:2e:d5:01: 83:74:94:c4:4b:3d:bb:a6:12:26:f2:20:68:fe:ee: fd:b7:0d:cb:6d:5a:77:46:4b:77:84:2a:a0:53:02: 35:26:99:8f:54:04:14:70:dc:79:ac:fb:86:36:f0: d0:90:b7:9f:6d:23:49:d7:6c:07:fe:50:50:16:ae: 1a:6e:b7:8c:68:72:f7:e1:ad:70:cf:ce:6f:e6:ea: 71:86:56:9a:a5:6b:ec:96:3d:a3:34:82:a7:b3:86: d8:51:8d:1b:3a:29:a0:6d:21:0e:12:29:0b:6a:e3: 10:d3:7e:f1:3f:2d:6d:fe:72:92:10:38:d4:f6:25: a1:48:cf:c2:8b:6d:0a:a5:9a:79:c6:2a:4c:f6:b4: 1a:e0:33:67:96:45:24:2b:5d:fe:3a:70:a1:bd:74: 82:a0:bf:67:ad:9f:63:74:4e:dc:38:3e:3b:5b:fe: 20:a8:3a:22:64:9b:a6:06:b9:19:da:d3:5f:98:0c: fa:ae:5c:3f:d3:47:e5:a2:52:99:b3:5d:ca:2d:3a: 0f:b2:57:b6:80:0a:7a:00:3a:8d:0a:06:10:c1:a6: b7:a2:4f:3d:a8:29:4e:b0:af:32:db:aa:f8:6f:dc: 83:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:32:57:73:04:A0:99:44:F4:5B:F0:0E:CA:98:FF:19:16:E5:09:7A X509v3 Authority Key Identifier: keyid:A8:03:2F:57:A6:11:9B:69:2A:2B:8F:14:2C:E4:94:EC:08:B1:FC:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:05:7f:80:df:4b:ab:33:6e:c4:89:19:d0:e2:ec:7c:46:cf: 11:68:20:ab:f9:c5:51:8c:cc:6c:c8:31:da:0d:e1:ce:e7:48: cf:1a:8d:83:e0:5f:b4:2e:87:d2:54:02:91:c8:67:dc:ed:d5: 1c:88:d0:19:05:83:94:50:1e:cc:00:ae:14:de:ce:08:e2:43: c3:44:85:fb:8c:b0:22:42:cf:f5:83:6c:61:bb:a2:73:f9:00: ce:63:b0:79:ba:90:08:dd:ae:f0:98:5f:c6:47:5c:cb:a2:43: 97:fb:ef:9e:b8:e6:ad:85:90:12:ab:ea:fb:1a:c6:50:7f:c0: 15:64:92:e3:84:92:e3:ee:9e:8e:44:4f:81:b1:e8:3a:7f:18: a6:c4:fe:b8:a1:77:42:85:82:23:ec:52:95:18:e2:b1:b7:88: 91:bc:99:2d:23:36:13:ff:2f:e0:1f:ca:25:3e:da:47:c5:24: 03:e0:41:ab:ab:25:20:4a:40:c6:bc:49:f1:03:9f:ce:f9:08: 7d:7e:4d:76:a6:95:5c:ee:46:f5:3d:a7:87:8d:c1:ed:fa:19: 13:5c:40:bc:7b:52:06:57:c6:c6:40:97:84:3e:9f:4c:7b:16: c8:09:98:f8:cf:44:04:46:62:61:60:50:62:96:fb:d3:a6:62: d4:67:8e:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7kpopigwaSNXJvXR1JfpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MDMyZjU3YTYxMTliNjkyYTJiOGYxNDJjZTQ5NGVjMDhi MWZjZDgwHhcNMjUxMjIxMjIwMTExWhcNMjUxMjIyMjIwMTExWjAzMTEwLwYDVQQD EyhjNTMyNTc3MzA0YTA5OTQ0ZjQ1YmYwMGVjYTk4ZmYxOTE2ZTUwOTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOV3lLUvUuc5OmFXvPO3Tbs0MPY6 khNL+wQu1QGDdJTESz27phIm8iBo/u79tw3LbVp3Rkt3hCqgUwI1JpmPVAQUcNx5 rPuGNvDQkLefbSNJ12wH/lBQFq4abreMaHL34a1wz85v5upxhlaapWvslj2jNIKn s4bYUY0bOimgbSEOEikLauMQ037xPy1t/nKSEDjU9iWhSM/Ci20KpZp5xipM9rQa 4DNnlkUkK13+OnChvXSCoL9nrZ9jdE7cOD47W/4gqDoiZJumBrkZ2tNfmAz6rlw/ 00flolKZs13KLToPsle2gAp6ADqNCgYQwaa3ok89qClOsK8y26r4b9yD2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUyV3MEoJlE9FvwDsqY/xkW5Ql6MB8GA1UdIwQY MBaAFKgDL1emEZtpKiuPFCzklOwIsfzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUFNdlY2WVJtMmtxSzQ4VUxPU1U3QWl4X05nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jNjQ2ZTgtYmI2ZC00ODYyLWI5YWQt ZmM3NzliMGQ5ZWVkLzEvcUFNdlY2WVJtMmtxSzQ4VUxPU1U3QWl4X05nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jNjQ2ZTgtYmI2ZC00ODYyLWI5YWQtZmM3NzliMGQ5ZWVk LzEvcUFNdlY2WVJtMmtxSzQ4VUxPU1U3QWl4X05nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgV/gN9L qzNuxIkZ0OLsfEbPEWggq/nFUYzMbMgx2g3hzudIzxqNg+BftC6H0lQCkchn3O3V HIjQGQWDlFAezACuFN7OCOJDw0SF+4ywIkLP9YNsYbuic/kAzmOwebqQCN2u8Jhf xkdcy6JDl/vvnrjmrYWQEqvq+xrGUH/AFWSS44SS4+6ejkRPgbHoOn8YpsT+uKF3 QoWCI+xSlRjisbeIkbyZLSM2E/8v4B/KJT7aR8UkA+BBq6slIEpAxrxJ8QOfzvkI fX5NdqaVXO5G9T2nh43B7foZE1xAvHtSBlfGxkCXhD6fTHsWyAmY+M9EBEZiYWBQ Ypb706Zi1GeO8w== -----END CERTIFICATE-----Generated at Mon Dec 22 00:11:39 2025 by rpki-client